Implantação do Graylog como ferramenta de centralização de logs de dados no Instituto Metrópole Digital - IMD/UFRN

Abstract

Log management is the conduct used to deal with large amounts of log data constantly generated by various devices capable of transferring, storing and processing data. This work describes the Graylog implementation process as a solution to the problem of centralizing logs generated in the internal network of Instituto Metrópole Digital (IMD), a supplementary unit of the Federal University of Rio Grande do Norte (UFRN), which was created in 2011 and its mission is to stimulate research, teaching and innovation to encourage the creation of a technological center in the area of Information technology in the state. Given the size of the building's technological infrastructure, which contains more than 150 (one hundred and fifty) devices, including switches, cameras, Access Points (APs) and servers, among other equipment that make up its infrastructure and given the need to improve control over the data that was dispersed in the assets and applications installed on the network, the use of Graylog was proposed and implemented as a tool to simplify the audit process and the identification of various events in the Institute's network, through analysis of these logs, once centralized, thus enabling their management and monitoring.